Re: aide, apt-get and remote management...

2004-03-01 Thread Johannes Graumann
Would you mind charing some of the scripting involved? Joh On Wed, 10 Dec 2003 23:26:21 -0500 Peter Solodov [EMAIL PROTECTED] wrote: On 10 Dec 2003, Douglas F. Calvert wrote: With all the recent discussions about debsigs and file integrity I have been trying to figure out the best way to

Re: aide, apt-get and remote management...

2004-01-19 Thread Lupe Christoph
On Sunday, 2004-01-18 at 13:22:27 -0800, Johannes Graumann wrote: Hello, Where are the options below from? I run aide 0.10, which is according to the sourceforge site the current one and it doesn't like it. Also as someone else mentioned: http://www.cs.tut.fi/~rammer/aide.html says Future

Re: aide, apt-get and remote management...

2004-01-19 Thread Lupe Christoph
On Sunday, 2004-01-18 at 13:22:27 -0800, Johannes Graumann wrote: Hello, Where are the options below from? I run aide 0.10, which is according to the sourceforge site the current one and it doesn't like it. Also as someone else mentioned: http://www.cs.tut.fi/~rammer/aide.html says Future

Re: aide, apt-get and remote management...

2004-01-18 Thread Johannes Graumann
Hello, Where are the options below from? I run aide 0.10, which is according to the sourceforge site the current one and it doesn't like it. Also as someone else mentioned: http://www.cs.tut.fi/~rammer/aide.html says Future plans: ... Encrypted and signed database. Joh On Fri, 12 Dec 2003

Re: aide, apt-get and remote management...

2003-12-14 Thread DI Peter Burgstaller
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 I would like to thank everybody for their great input. It was very useful to see your responses. I guess the recent rootings have made us all a little more careful. Take care, Peter - -- Dipl.-Ing. Peter Burgstaller Technical Director @ all

Re: aide, apt-get and remote management...

2003-12-14 Thread Lupe Christoph
On Friday, 2003-12-12 at 12:39:49 +0100, Adam ENDRODI wrote: On Fri, Dec 12, 2003 at 07:46:38AM +0100, Lupe Christoph wrote: We don't use AIDE exclusively at a client site, but in combination with Tripwire. We think tripwire is a little more secure becuse it uses signed databases.

Re: aide, apt-get and remote management...

2003-12-14 Thread Lupe Christoph
On Friday, 2003-12-12 at 12:39:49 +0100, Adam ENDRODI wrote: On Fri, Dec 12, 2003 at 07:46:38AM +0100, Lupe Christoph wrote: We don't use AIDE exclusively at a client site, but in combination with Tripwire. We think tripwire is a little more secure becuse it uses signed databases.

Re: aide, apt-get and remote management...

2003-12-12 Thread Adam ENDRODI
On Fri, Dec 12, 2003 at 07:46:38AM +0100, Lupe Christoph wrote: We don't use AIDE exclusively at a client site, but in combination with Tripwire. We think tripwire is a little more secure becuse it uses signed databases. Perhaps the following ./configure options will prove themselves

Re: aide, apt-get and remote management...

2003-12-12 Thread Lupe Christoph
Hello! We don't use AIDE exclusively at a client site, but in combination with Tripwire. We think tripwire is a little more secure becuse it uses signed databases. So we protect aide.db with Tripwire. AIDE is used for the parts tripwire can't do because of it's limited configurability. Here is

Re: aide, apt-get and remote management...

2003-12-12 Thread Adam ENDRODI
On Fri, Dec 12, 2003 at 07:46:38AM +0100, Lupe Christoph wrote: We don't use AIDE exclusively at a client site, but in combination with Tripwire. We think tripwire is a little more secure becuse it uses signed databases. Perhaps the following ./configure options will prove themselves

Re: aide, apt-get and remote management...

2003-12-11 Thread DI Peter Burgstaller
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 - -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi there, I'm trying to use aide now as well .. but with the default debian config .. it produces every day massive changes .. especially to the /var/log/* files due to logrotate. Any reasonable

Re: aide, apt-get and remote management...

2003-12-11 Thread Peter Solodov
On 11 Dec 2003, DI Peter Burgstaller wrote: Hi there, I'm trying to use aide now as well .. but with the default debian config .. it produces every day massive changes .. especially to the /var/log/* files due to logrotate. Any reasonable settings that account for that? Modify AIDE's

Re: aide, apt-get and remote management...

2003-12-11 Thread Adam ENDRODI
On Thu, Dec 11, 2003 at 12:44:27PM +0100, DI Peter Burgstaller wrote: I'm trying to use aide now as well .. but with the default debian config .. it produces every day massive changes .. especially to the /var/log/* files due to logrotate. Any reasonable settings that account for that?

Re: aide, apt-get and remote management...

2003-12-11 Thread Douglas F. Calvert
On Wed, 2003-12-10 at 23:26, Peter Solodov wrote: That's the file integrity part. As for upgrades and updates, I never install anything automatically, but I have a cron job which checks if updates are available. And if there are, I would log on to a machine and install new packages myself.

Re: aide, apt-get and remote management...

2003-12-11 Thread Peter Solodov
On 11 Dec 2003, Douglas F. Calvert wrote: When I do the files are obviously different in the aide database and I wondering if anyone has come up with a way to deal with these differences. Do you mean that new signatures don't match the ones in database? In this case you review changes and if

Re: aide, apt-get and remote management...

2003-12-11 Thread Douglas F. Calvert
On Thu, 2003-12-11 at 06:44, DI Peter Burgstaller wrote: Hi there, I'm trying to use aide now as well .. but with the default debian config .. it produces every day massive changes .. especially to the /var/log/* files due to logrotate. Any reasonable settings that account for that?

Re: aide, apt-get and remote management...

2003-12-11 Thread Douglas F. Calvert
On Thu, 2003-12-11 at 13:24, Peter Solodov wrote: On 11 Dec 2003, Douglas F. Calvert wrote: When I do the files are obviously different in the aide database and I wondering if anyone has come up with a way to deal with these differences. Do you mean that new signatures don't match the

Re: aide, apt-get and remote management...

2003-12-11 Thread Rolf Kutz
* Quoting Douglas F. Calvert ([EMAIL PROTECTED]): This is the problem. I am having trouble implementing a solution to update the database after an upgrade and still maintain its validity. Run aide --update right after the upgrade and compare the output with dpkg -L of the package. The replace

Re: aide, apt-get and remote management...

2003-12-11 Thread DI Peter Burgstaller
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 - -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi there, I'm trying to use aide now as well .. but with the default debian config .. it produces every day massive changes .. especially to the /var/log/* files due to logrotate. Any reasonable

Re: aide, apt-get and remote management...

2003-12-11 Thread Peter Solodov
On 11 Dec 2003, DI Peter Burgstaller wrote: Hi there, I'm trying to use aide now as well .. but with the default debian config .. it produces every day massive changes .. especially to the /var/log/* files due to logrotate. Any reasonable settings that account for that? Modify AIDE's

Re: aide, apt-get and remote management...

2003-12-11 Thread Adam ENDRODI
On Thu, Dec 11, 2003 at 12:44:27PM +0100, DI Peter Burgstaller wrote: I'm trying to use aide now as well .. but with the default debian config .. it produces every day massive changes .. especially to the /var/log/* files due to logrotate. Any reasonable settings that account for that?

Re: aide, apt-get and remote management...

2003-12-11 Thread Peter Solodov
On 11 Dec 2003, Douglas F. Calvert wrote: When I do the files are obviously different in the aide database and I wondering if anyone has come up with a way to deal with these differences. Do you mean that new signatures don't match the ones in database? In this case you review changes and if

Re: aide, apt-get and remote management...

2003-12-11 Thread Douglas F. Calvert
On Thu, 2003-12-11 at 06:44, DI Peter Burgstaller wrote: Hi there, I'm trying to use aide now as well .. but with the default debian config .. it produces every day massive changes .. especially to the /var/log/* files due to logrotate. Any reasonable settings that account for that?

Re: aide, apt-get and remote management...

2003-12-11 Thread Rolf Kutz
* Quoting Douglas F. Calvert ([EMAIL PROTECTED]): This is the problem. I am having trouble implementing a solution to update the database after an upgrade and still maintain its validity. Run aide --update right after the upgrade and compare the output with dpkg -L of the package. The replace

Re: aide, apt-get and remote management...

2003-12-10 Thread Peter Solodov
On 10 Dec 2003, Douglas F. Calvert wrote: With all the recent discussions about debsigs and file integrity I have been trying to figure out the best way to deal with apt-get uprgades on remote machines with aide running. Does anyone have a good system for the management of the aide database

Re: aide, apt-get and remote management...

2003-12-10 Thread Peter Solodov
On 10 Dec 2003, Douglas F. Calvert wrote: With all the recent discussions about debsigs and file integrity I have been trying to figure out the best way to deal with apt-get uprgades on remote machines with aide running. Does anyone have a good system for the management of the aide database